Keeping your customers' data safe is the result of keeping multiple layers of the infrastructure and services secured. Because we are in a cloud environment, we don't have access to every layer of our infrastructure. For instance, we don't have physical access to the data centers where our EC2 instances are running. Therefore, keeping each layer secured is a responsibility shared between you and AWS.
Understanding where to focus your effort
The shared responsibility model
In this world of shared responsibility, AWS provides the security of the cloud and, as an AWS user, you are responsible for providing the security in the cloud. In other words, AWS will take care of securing the data centers, the physical infrastructure...
